To remove members from a confidentiality QOP, substitute the remove: attribute for the add: attribute shown in the procedure for adding members, Assigning Members to an Integrity QOP Policy, then list the unneeded members with member attributes.
For example:
dn: cn=high,cn=conf-qops,cn=policy1,cn=tdatrootP,dc=domain1,dc=com changetype: modify remove: member member: cn=xyz,cn=users,cn=system1,cn=tdatrootA,dc=domain1,dc=com